CVE-2022-31494

CVE-2022-31494 affects LibreHealth EHR Base 2.0.0 where the gacl/admin/acl_admin.php page’s action parameter is vulnerable to cross-site scripting (XSS). The issue is described across multiple sources (Red Hat, CNVD, OSV, CVE listings) as a stored/ reflexive XSS condition in this parameter. The a...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

Cross site scripting

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31498

CVE-2022-31498 affects LibreHealth EHR Base 2.0.0 and is described as a cross-site scripting (XSS) vulnerability in the interface/orders/patient_match_dialog.php path. The connected records confirm the affected product and vulnerability class but do not provide exploitation steps or concrete expl...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31492

CVE-2022-31492 concerns a Cross Site Scripting (XSS) vulnerability in LibreHealth EHR Base 2.0.0, exploitable via interface/usergroup/usergroup_admin_add.php Username. Affected component is the LibreHealth EHR Base 2.0.0 web interface; root cause is input handling in the Username field that allow...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

CVE-2022-31493 affects LibreHealth EHR Base 2.0.0 with a cross-site scripting vulnerability in gacl/admin/acl_admin.php (acl_id). The connected Red Hat, CNVD, OSV, CVE records consistently identify an XSS issue but do not provide detailed technical exploit steps, versions beyond 2.0.0, or remedia...

LibreHealth EHR 跨站脚本漏洞

LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be both easy to use out of the box and customizable for use in a variety of healthcare settings.LibreHealth EHR 2.0.0 is vulnerable to a cross-site scripting vulnerability for which no detailed vulnerability...